Japan proposes privacy law fine rules, 50% reduction for self-reporting

( October 14, 2026, 09:52 GMT | Official Statement) -- MLex Summary: Japan’s data protection authority proposed rules Wednesday for calculating administrative fines under the amended personal information protection law, including a 50 percent reduction for companies that self-report violations. The Personal Information Protection Commission also proposed strict identity checks for data brokers trading personal information, including directories and datasets, under the opt-out system, which allows individuals to object to the provision of their data to third parties. To prevent such data from reaching criminal groups or their associates, the amended law requires brokers to verify data sellers’ identities through documents such as personal identification cards, driver’s licenses and proof of corporate registration. The amended law, passed in July, is scheduled to take effect by July 2028.The statement is attached (in Japanese). ...

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.


Know what others in the room don’t, with features including:

  • Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
  • Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
  • Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
  • Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login

Documents